===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/34.html,v
retrieving revision 1.61
retrieving revision 1.62
diff -c -r1.61 -r1.62
*** www/34.html	2016/08/15 02:22:05	1.61
--- www/34.html	2017/06/26 17:18:57	1.62
***************
*** 59,65 ****
  <ul>
  
  <li>The i386 architecture has been switched to the
!     <a href="http://man.openbsd.org/?query=elf">ELF</a>
       executable format.
  <p>
  
--- 59,65 ----
  <ul>
  
  <li>The i386 architecture has been switched to the
!     <a href="https://man.openbsd.org/?query=elf">ELF</a>
       executable format.
  <p>
  
***************
*** 69,75 ****
      effort limit on code execution.
  <p>
  
! <li><a href="http://man.openbsd.org/?query=ld.so">ld.so(1)</a>
      on ELF platforms now loads libraries in a random order for
      greater resistance to attacks.  The i386 architecture also maps libraries
      into somewhat randomized addresses.  Together with W^X and
--- 69,75 ----
      effort limit on code execution.
  <p>
  
! <li><a href="https://man.openbsd.org/?query=ld.so">ld.so(1)</a>
      on ELF platforms now loads libraries in a random order for
      greater resistance to attacks.  The i386 architecture also maps libraries
      into somewhat randomized addresses.  Together with W^X and
***************
*** 81,95 ****
  <li>A static bounds checker has been added to the compiler to perform basic
      checks on functions which accept buffers and sizes.  The checker aims to
      find common mistakes in the use of library functions such as
!     <a href="http://man.openbsd.org/?query=strlcpy">strlcpy(3)</a>
!     or <a href="http://man.openbsd.org/?query=sscanf">sscanf(3)</a>
      without emitting any false positives.  Running it over the source and ports
      trees revealed over a hundred real bugs, which were fixed and submitted back
      to the original authors where possible.
  <p>
  
  <li>Privilege separation has been implemented for the
!     <a href="http://man.openbsd.org/?query=syslogd">syslogd(8)</a>
      daemon, making it much more robust against future errors.  The child which
      listens to network traffic now runs as a normal user and chroots itself,
      while the parent process tracks the state of the child and performs
--- 81,95 ----
  <li>A static bounds checker has been added to the compiler to perform basic
      checks on functions which accept buffers and sizes.  The checker aims to
      find common mistakes in the use of library functions such as
!     <a href="https://man.openbsd.org/?query=strlcpy">strlcpy(3)</a>
!     or <a href="https://man.openbsd.org/?query=sscanf">sscanf(3)</a>
      without emitting any false positives.  Running it over the source and ports
      trees revealed over a hundred real bugs, which were fixed and submitted back
      to the original authors where possible.
  <p>
  
  <li>Privilege separation has been implemented for the
!     <a href="https://man.openbsd.org/?query=syslogd">syslogd(8)</a>
      daemon, making it much more robust against future errors.  The child which
      listens to network traffic now runs as a normal user and chroots itself,
      while the parent process tracks the state of the child and performs
***************
*** 99,116 ****
  <li>Many unsafe string functions have been removed from the kernel and userland
      utilities.  This audit is one of the most comprehensive OpenBSD has ever
      done, with thousands of occurrences of
!     <a href="http://man.openbsd.org/?query=strcpy">strcpy(3)</a>,
!     <a href="http://man.openbsd.org/?query=strcat">strcat(3)</a>,
!     <a href="http://man.openbsd.org/?query=sprintf">sprintf(3)</a>,
      and
!     <a href="http://man.openbsd.org/?query=vsprintf">vsprintf(3)</a>
      being replaced with safer, bounded alternatives such as
!     <a href="http://man.openbsd.org/?query=strlcpy">strlcpy(3)</a>,
!     <a href="http://man.openbsd.org/?query=strlcat">strlcat(3)</a>,
!     <a href="http://man.openbsd.org/?query=snprintf">snprintf(3)</a>,
!     <a href="http://man.openbsd.org/?query=vsnprintf">vsnprintf(3)</a>,
      and
!     <a href="http://man.openbsd.org/?query=asprintf">asprintf(3)</a>.
  <p>
  
  <li>Many improvements to and bugs fixed in the
--- 99,116 ----
  <li>Many unsafe string functions have been removed from the kernel and userland
      utilities.  This audit is one of the most comprehensive OpenBSD has ever
      done, with thousands of occurrences of
!     <a href="https://man.openbsd.org/?query=strcpy">strcpy(3)</a>,
!     <a href="https://man.openbsd.org/?query=strcat">strcat(3)</a>,
!     <a href="https://man.openbsd.org/?query=sprintf">sprintf(3)</a>,
      and
!     <a href="https://man.openbsd.org/?query=vsprintf">vsprintf(3)</a>
      being replaced with safer, bounded alternatives such as
!     <a href="https://man.openbsd.org/?query=strlcpy">strlcpy(3)</a>,
!     <a href="https://man.openbsd.org/?query=strlcat">strlcat(3)</a>,
!     <a href="https://man.openbsd.org/?query=snprintf">snprintf(3)</a>,
!     <a href="https://man.openbsd.org/?query=vsnprintf">vsnprintf(3)</a>,
      and
!     <a href="https://man.openbsd.org/?query=asprintf">asprintf(3)</a>.
  <p>
  
  <li>Many improvements to and bugs fixed in the
***************
*** 131,140 ****
  <p>
  
  <li>Emulation support for binary compatibility is now controlled via
!     <a href="http://man.openbsd.org/?query=sysctl&amp;sektion=8">sysctl(8)</a>.
      Emulation is now disabled by default to limit exposure to malicious
      binaries, and can be enabled in
!     <a href="http://man.openbsd.org/?query=sysctl.conf">
      sysctl.conf(5)</a>.
  <p>
  
--- 131,140 ----
  <p>
  
  <li>Emulation support for binary compatibility is now controlled via
!     <a href="https://man.openbsd.org/?query=sysctl&amp;sektion=8">sysctl(8)</a>.
      Emulation is now disabled by default to limit exposure to malicious
      binaries, and can be enabled in
!     <a href="https://man.openbsd.org/?query=sysctl.conf">
      sysctl.conf(5)</a>.
  <p>
  
***************
*** 142,154 ****
  <p>
  
  <li>The ports tree now supports building programs under
!     <a href="http://man.openbsd.org/?query=systrace">
      systrace(1)</a>, preventing the possibility of applications harming the
      system at compile-time via trojaned configuration scripts or otherwise.
  <p>
  
  <li>Symbol caching in
!     <a href="http://man.openbsd.org/?query=ld.so">ld.so(1)</a>
      reduces the startup time of large applications.
  <p>
  
--- 142,154 ----
  <p>
  
  <li>The ports tree now supports building programs under
!     <a href="https://man.openbsd.org/?query=systrace">
      systrace(1)</a>, preventing the possibility of applications harming the
      system at compile-time via trojaned configuration scripts or otherwise.
  <p>
  
  <li>Symbol caching in
!     <a href="https://man.openbsd.org/?query=ld.so">ld.so(1)</a>
      reduces the startup time of large applications.
  <p>
  
***************
*** 157,211 ****
  <p>
  
  <li>Replacement of GNU
! <a href="http://man.openbsd.org/?query=diff">diff(1)</a>,
! <a href="http://man.openbsd.org/?query=diff3">diff3(1)</a>,
! <a href="http://man.openbsd.org/?query=grep">grep(1)</a>,
! <a href="http://man.openbsd.org/?query=egrep">egrep(1)</a>,
! <a href="http://man.openbsd.org/?query=fgrep">fgrep(1)</a>,
! <a href="http://man.openbsd.org/?query=zgrep">zgrep(1)</a>,
! <a href="http://man.openbsd.org/?query=zegrep">zegrep(1)</a>,
! <a href="http://man.openbsd.org/?query=zfgrep">zfgrep(1)</a>,
! <a href="http://man.openbsd.org/?query=gzip">gzip(1)</a>,
! <a href="http://man.openbsd.org/?query=zcat">zcat(1)</a>,
! <a href="http://man.openbsd.org/?query=gunzip">gunzip(1)</a>,
! <a href="http://man.openbsd.org/?query=gzcat">gzcat(1)</a>,
! <a href="http://man.openbsd.org/?query=zcmp">zcmp(1)</a>,
! <a href="http://man.openbsd.org/?query=zmore">zmore(1)</a>,
! <a href="http://man.openbsd.org/?query=zdiff">zdiff(1)</a>,
! <a href="http://man.openbsd.org/?query=zforce">zforce(1)</a>,
! <a href="http://man.openbsd.org/?query=gzexe">gzexe(1)</a>,
  and
! <a href="http://man.openbsd.org/?query=znew">znew(1)</a>
  commands with BSD licensed equivalents.
  <p>
  
  <li>Addition of read-only support for
!     <a href="http://man.openbsd.org/?query=mount_ntfs">NTFS</a>
      file systems.
  <p>
  
  <li>Reliability improvements to layered file systems, enabling
!     <a href="http://man.openbsd.org/?query=mount_null">NULLFS</a>
      to work again.
  <p>
  
  <li>Import of
!     <a href="http://man.openbsd.org/?query=growfs">growfs(8)</a>
      utility, allowing expansion of existing file systems.
  <p>
  
  <li>Improvements to
!     <a href="http://man.openbsd.org/?query=compat_linux">linux emulation</a>
      enabling more applications to run.
  <p>
  
  <li>Significant improvements to the
!     <a href="http://man.openbsd.org/?query=pthreads">pthreads(3)</a>
      library.
  <p>
  
  <li>Replace many static fd_set uses, to instead use
!     <a href="http://man.openbsd.org/?query=poll">poll(2)</a>
  or dynamic allocation.
  <p>
  
--- 157,211 ----
  <p>
  
  <li>Replacement of GNU
! <a href="https://man.openbsd.org/?query=diff">diff(1)</a>,
! <a href="https://man.openbsd.org/?query=diff3">diff3(1)</a>,
! <a href="https://man.openbsd.org/?query=grep">grep(1)</a>,
! <a href="https://man.openbsd.org/?query=egrep">egrep(1)</a>,
! <a href="https://man.openbsd.org/?query=fgrep">fgrep(1)</a>,
! <a href="https://man.openbsd.org/?query=zgrep">zgrep(1)</a>,
! <a href="https://man.openbsd.org/?query=zegrep">zegrep(1)</a>,
! <a href="https://man.openbsd.org/?query=zfgrep">zfgrep(1)</a>,
! <a href="https://man.openbsd.org/?query=gzip">gzip(1)</a>,
! <a href="https://man.openbsd.org/?query=zcat">zcat(1)</a>,
! <a href="https://man.openbsd.org/?query=gunzip">gunzip(1)</a>,
! <a href="https://man.openbsd.org/?query=gzcat">gzcat(1)</a>,
! <a href="https://man.openbsd.org/?query=zcmp">zcmp(1)</a>,
! <a href="https://man.openbsd.org/?query=zmore">zmore(1)</a>,
! <a href="https://man.openbsd.org/?query=zdiff">zdiff(1)</a>,
! <a href="https://man.openbsd.org/?query=zforce">zforce(1)</a>,
! <a href="https://man.openbsd.org/?query=gzexe">gzexe(1)</a>,
  and
! <a href="https://man.openbsd.org/?query=znew">znew(1)</a>
  commands with BSD licensed equivalents.
  <p>
  
  <li>Addition of read-only support for
!     <a href="https://man.openbsd.org/?query=mount_ntfs">NTFS</a>
      file systems.
  <p>
  
  <li>Reliability improvements to layered file systems, enabling
!     <a href="https://man.openbsd.org/?query=mount_null">NULLFS</a>
      to work again.
  <p>
  
  <li>Import of
!     <a href="https://man.openbsd.org/?query=growfs">growfs(8)</a>
      utility, allowing expansion of existing file systems.
  <p>
  
  <li>Improvements to
!     <a href="https://man.openbsd.org/?query=compat_linux">linux emulation</a>
      enabling more applications to run.
  <p>
  
  <li>Significant improvements to the
!     <a href="https://man.openbsd.org/?query=pthreads">pthreads(3)</a>
      library.
  <p>
  
  <li>Replace many static fd_set uses, to instead use
!     <a href="https://man.openbsd.org/?query=poll">poll(2)</a>
  or dynamic allocation.
  <p>
  
***************
*** 220,226 ****
  <p>
  
  <li>A large number of bug fixes, changes, and optimizations to our packet filter
!     <a href="http://man.openbsd.org/?query=pf">pf(4)</a>
      including:
  <ul>
  <li>packet tagging (e.g. filter on tags added by bridge based on MAC address)
--- 220,226 ----
  <p>
  
  <li>A large number of bug fixes, changes, and optimizations to our packet filter
!     <a href="https://man.openbsd.org/?query=pf">pf(4)</a>
      including:
  <ul>
  <li>packet tagging (e.g. filter on tags added by bridge based on MAC address)
***************
*** 234,283 ****
  <li>Improved hardware support, including:
  <ul>
  <li>Kauai ATA controllers (Apple ATA100 wdc)
!     <a href="http://man.openbsd.org/?query=kauaiata&arch=macppc">
      kauaiata(4)</a> enabling support for Powerbook 12" and 17" models.
  <li>Support for controlling LongRun registers on Transmeta CPUs.
  <li>Many fixes to
!     <a href="http://man.openbsd.org/?query=aac">aac(4)</a>,
!     <a href="http://man.openbsd.org/?query=ahc">ahc(4)</a>,
!     <a href="http://man.openbsd.org/?query=osiop">osiop(4)</a>,
!     and <a href="http://man.openbsd.org/?query=siop">siop(4)</a>
      SCSI drivers.
  <li>New
!     <a href="http://man.openbsd.org/?query=it">it(4)</a>,
!     <a href="http://man.openbsd.org/?query=lm">lm(4)</a>, and
!     <a href="http://man.openbsd.org/?query=viaenv">viaenv(4)</a>
      hardware monitor drivers.
  <li>New
!     <a href="http://man.openbsd.org/?query=safe">safe(4)</a>
      driver for SafeNet crypto accelerators.
  <li>New
!     <a href="http://man.openbsd.org/?query=mtd">mtd(4)</a>
      driver for Myson Technologies network cards.
  <li>More ethernet cards supported by
!     <a href="http://man.openbsd.org/?query=sk">sk(4)</a>,
!     <a href="http://man.openbsd.org/?query=wi">wi(4)</a>,
!     <a href="http://man.openbsd.org/?query=fxp">fxp(4)</a>,
!     and <a href="http://man.openbsd.org/?query=dc&amp;sektion=4">dc(4)</a>.
  <li>Massive overhaul and sync with NetBSD of the entire
!     <a href="http://man.openbsd.org/?query=usb&amp;sektion=4">usb(4)</a>
      support system.
  <li>New and better support for various controllers in
!     <a href="http://man.openbsd.org/?query=pciide">pciide(4)</a>,
      including experimental support for Serial ATA.
  <li>New drivers to support
!     <a href="http://man.openbsd.org/?query=mgx&arch=sparc">
      mgx(4)</a> and
!     <a href="http://man.openbsd.org/?query=pninek&arch=sparc">
      pninek(4)</a> SPARC framebuffers. The
!     <a href="http://man.openbsd.org/?query=vigra&arch=sparc">
      vigra(4)</a> driver also supports more models.
! <li><a href="http://man.openbsd.org/?query=pcmcia">pcmcia(4)</a>
      support for Tadpole SPARCBooks and SPARCs with pcmcia-sbus bridges.
  <li>Watchdog support for
!     <a href="http://man.openbsd.org/?query=elansc&arch=i386">elansc(4)</a>
      and
!     <a href="http://man.openbsd.org/?query=geodesc&arch=i386">geodesc(4)</a>
      as used on Soekris boards.
  </ul>
  <p>
--- 234,283 ----
  <li>Improved hardware support, including:
  <ul>
  <li>Kauai ATA controllers (Apple ATA100 wdc)
!     <a href="https://man.openbsd.org/?query=kauaiata&arch=macppc">
      kauaiata(4)</a> enabling support for Powerbook 12" and 17" models.
  <li>Support for controlling LongRun registers on Transmeta CPUs.
  <li>Many fixes to
!     <a href="https://man.openbsd.org/?query=aac">aac(4)</a>,
!     <a href="https://man.openbsd.org/?query=ahc">ahc(4)</a>,
!     <a href="https://man.openbsd.org/?query=osiop">osiop(4)</a>,
!     and <a href="https://man.openbsd.org/?query=siop">siop(4)</a>
      SCSI drivers.
  <li>New
!     <a href="https://man.openbsd.org/?query=it">it(4)</a>,
!     <a href="https://man.openbsd.org/?query=lm">lm(4)</a>, and
!     <a href="https://man.openbsd.org/?query=viaenv">viaenv(4)</a>
      hardware monitor drivers.
  <li>New
!     <a href="https://man.openbsd.org/?query=safe">safe(4)</a>
      driver for SafeNet crypto accelerators.
  <li>New
!     <a href="https://man.openbsd.org/?query=mtd">mtd(4)</a>
      driver for Myson Technologies network cards.
  <li>More ethernet cards supported by
!     <a href="https://man.openbsd.org/?query=sk">sk(4)</a>,
!     <a href="https://man.openbsd.org/?query=wi">wi(4)</a>,
!     <a href="https://man.openbsd.org/?query=fxp">fxp(4)</a>,
!     and <a href="https://man.openbsd.org/?query=dc&amp;sektion=4">dc(4)</a>.
  <li>Massive overhaul and sync with NetBSD of the entire
!     <a href="https://man.openbsd.org/?query=usb&amp;sektion=4">usb(4)</a>
      support system.
  <li>New and better support for various controllers in
!     <a href="https://man.openbsd.org/?query=pciide">pciide(4)</a>,
      including experimental support for Serial ATA.
  <li>New drivers to support
!     <a href="https://man.openbsd.org/?query=mgx&arch=sparc">
      mgx(4)</a> and
!     <a href="https://man.openbsd.org/?query=pninek&arch=sparc">
      pninek(4)</a> SPARC framebuffers. The
!     <a href="https://man.openbsd.org/?query=vigra&arch=sparc">
      vigra(4)</a> driver also supports more models.
! <li><a href="https://man.openbsd.org/?query=pcmcia">pcmcia(4)</a>
      support for Tadpole SPARCBooks and SPARCs with pcmcia-sbus bridges.
  <li>Watchdog support for
!     <a href="https://man.openbsd.org/?query=elansc&arch=i386">elansc(4)</a>
      and
!     <a href="https://man.openbsd.org/?query=geodesc&arch=i386">geodesc(4)</a>
      as used on Soekris boards.
  </ul>
  <p>
***************
*** 369,377 ****
  <p>
  To make a boot floppy under MS-DOS, use the &quot;rawrite&quot; utility located
  at <i>CD:/3.4/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
! use the <a href="http://man.openbsd.org/?query=
  dd&amp;sektion=1">dd(1)</a> utility. The following is an example usage of
! <a href="http://man.openbsd.org/?query=dd&amp;sektion=1">dd(1)
  </a>, where the device could be &quot;floppy&quot;, &quot;rfd0c&quot;, or
  &quot;rfd0a&quot;.
  
--- 369,377 ----
  <p>
  To make a boot floppy under MS-DOS, use the &quot;rawrite&quot; utility located
  at <i>CD:/3.4/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
! use the <a href="https://man.openbsd.org/?query=
  dd&amp;sektion=1">dd(1)</a> utility. The following is an example usage of
! <a href="https://man.openbsd.org/?query=dd&amp;sektion=1">dd(1)
  </a>, where the device could be &quot;floppy&quot;, &quot;rfd0c&quot;, or
  &quot;rfd0a&quot;.
  
***************
*** 562,568 ****
  OpenBSD ports system.
  <p>
  The <i>ports/</i> directory represents a CVS (see the manpage for
! <a href="http://man.openbsd.org/?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">
  cvs(1)</a> if
  you aren't familiar with CVS) checkout of our ports.  As with our complete
  source tree, our ports tree is available via anoncvs.  So, in
--- 562,568 ----
  OpenBSD ports system.
  <p>
  The <i>ports/</i> directory represents a CVS (see the manpage for
! <a href="https://man.openbsd.org/?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">
  cvs(1)</a> if
  you aren't familiar with CVS) checkout of our ports.  As with our complete
  source tree, our ports tree is available via anoncvs.  So, in